JP2012198801A - Information processor, information processing method, and information processing program - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide an information processor or the like which can easily conceal the existence itself of the content information to be concealed.SOLUTION: An information processor includes a mode setting unit 10 for setting an operation mode to be a concealment mode or an unconcealment mode, a storage unit 20 for storing content information including concealed content information that is the content information to be concealed, a dummy file generation unit 32 for generating replacing content information to replace the concealed content information stored in the storage unit 20 based on a predetermined conversion rule, and a dummy file display unit 33 for displaying the replacing content information generated by the dummy file generation unit 32.

Description

  The present invention relates to an information processing apparatus, an information processing method, and an information processing program. In particular, the present invention relates to a technique for concealing a part of a large number of stored contents as a concealment target for a browsing operation.

  In many cases, information of various contents is stored on storage devices of various devices such as mobile phone terminals and digital cameras. Specifically, there are contents such as an image file obtained by photographing with a camera and an e-mail text. In addition, contents such as image files and e-mail texts may be registered on various servers connected to the Internet.

  Such content may or may not contain personal information of a specific person. In many cases, content that does not contain personal information will not cause problems even if it is viewed by unspecified people. However, content that contains personal information can only be viewed by specific users such as the device owner. Is desirable.

  However, if all the stored contents cannot be viewed by anyone other than a specific user, the convenience is impaired. Accordingly, it is necessary to conceal a part of the stored many contents, for example, one containing personal information, as a concealment target for the browsing operation.

  Conventional techniques related to the present invention are disclosed in, for example, Patent Document 1 and Patent Document 2. Patent Document 1 discloses a technique that can be used when managing position information of various users and outputting movement route data.

  Specifically, user behavior data (position information) is acquired and stored in the server, and one similar to the current user behavior data is selected from a plurality of past user behavior data to generate pseudo behavior data. In addition, if the current user behavior pattern can be set as concealment, and if it is a concealment behavior pattern, a pseudo behavior pattern is generated, and the behavior of the concealed portion is replaced with the pseudo behavior pattern under specific conditions.

  For example, when outputting data of a movement route, a certain point on the route is set as pseudo data, or data at a certain point is set to null. Thereby, an unusual action can be concealed. In addition, since the pseudo behavior pattern is generated from the past behavior pattern of the user himself / herself, no unnaturalness occurs in the behavior.

  On the other hand, Patent Document 2 discloses a technique applicable when displaying a medical image. Specifically, if the patient's personal information is embedded in the medical image, mask processing is performed according to the purpose (use, level) without processing the original medical image for privacy protection. And display with confidentiality. Masking can be applied to displays, printed materials, and multiple images.

International Publication No. 2010/050195 Pamphlet JP 2006-320488 A

  However, in the technique disclosed in Patent Document 1, the only information that can be concealed is the action history. Therefore, it cannot be used for the purpose of concealing information on specific contents such as image files or e-mail contents. In addition, server cooperation is indispensable, and large-scale facilities and processing are required for realization such as accumulation of past user behavior patterns.

  Further, in the technique disclosed in Patent Document 2, since the mask image is superimposed on the information to be concealed so that the concealment target cannot be seen, the fact that the information to be concealed exists in the portion of the mask image itself. Anyone can know. In other words, it is not possible to conceal the presence of information to be concealed. For example, a third party attempting unauthorized access may be interested in personal information that should be concealed by the mask image. Is considered to be dangerous. Further, even a general third party notices that the concealed part has important meaning, that is, there is information that needs to be concealed.

  An object of the present invention is to provide an information processing apparatus, an information processing method, and an information processing program that can easily conceal the existence of content information to be concealed.

  An information processing apparatus according to the present invention includes a mode setting unit that sets an operation mode to a secret mode or a non-secret mode, a storage unit that stores content information including secret content information that is content information to be concealed, and a predetermined conversion rule. Based on the alternative content information generating unit for generating alternative content information to replace the secret content information stored in the storage unit, a display unit for displaying the alternative content information generated by the alternative content information generation unit, Is provided.

  According to this information processing apparatus, it is possible to easily conceal the presence of content information to be concealed. In addition, a third party who does not have the right to browse the confidential content information does not notice the fact that the confidential content information exists. In addition, there is no need for server cooperation in order to perform such concealment.

  The information processing method of the present invention includes a step of setting the operation mode to a secret mode or a non-confidential mode, a step of storing content information including secret content information that is content information to be concealed in a storage unit, Based on the conversion rule, the method includes generating alternative content information that substitutes for the secret content information stored in the storage unit, and displaying the generated alternative content information on a display unit.

  According to this information processing method, it is possible to easily conceal the presence of content information to be concealed. In addition, a third party who does not have the right to browse the confidential content information does not notice the fact that the confidential content information exists. In addition, there is no need for server cooperation in order to perform such concealment.

  Moreover, the information processing program of this invention is a program for making a computer perform each step of the said information processing method.

  According to this information processing program, it is possible to easily conceal the presence of content information to be concealed. In addition, a third party who does not have the right to browse the confidential content information does not notice the fact that the confidential content information exists. In addition, there is no need for server cooperation in order to perform such concealment.

  According to the present invention, the presence of content information to be concealed can be easily concealed.

The block diagram which shows the structural example of the information processing apparatus of embodiment of this invention The block diagram which shows the specific example regarding the structure of each storage area and information which the information processing apparatus of embodiment of this invention uses The figure which shows the specific example of the state transition of each display screen output by the information processing apparatus of embodiment of this invention. The flowchart which shows an example of the file display control process which the information processing apparatus of embodiment of this invention performs The flowchart which shows an example of the secret object file extraction process which the information processing apparatus of embodiment of this invention performs The flowchart which shows an example of the pseudo file control processing which the information processing apparatus of embodiment of this invention performs The flowchart which shows an example of the display control process at the time of secrecy mode cancellation | release which the information processing apparatus of embodiment of this invention performs The figure which shows the specific example of the content list which the information processing apparatus in embodiment of this invention outputs for a display. The figure which shows the specific example of the display content of the mail display screen in embodiment of this invention The figure which shows the structural example of the conversion rule for converting the content of the mail in embodiment of this invention. The figure which shows the specific examples, such as the number of preservation | saves according to the operation mode and data preservation | save state in embodiment of this invention

  Embodiments of the present invention will be described below with reference to the drawings.

  A configuration example of the information processing apparatus 100 according to the present embodiment is shown in FIG. The information processing apparatus 100 shown in FIG. 1 is assumed to be configured as a part of various functions incorporated in devices such as a mobile phone terminal, a digital camera, and a personal computer. For example, the information processing apparatus 100 can be applied to browsing functions provided by various servers existing on the Internet. As a representative example, the information processing apparatus 100 is assumed to be configured by hardware such as a microcomputer incorporated in a device and a program executed by the hardware.

  In the case of a mobile phone terminal, various information contents such as an image file obtained by taking a picture of a camera and a file holding the contents of an email transmitted / received by an email communication function are stored on a recording medium such as a memory card. Typically stored above. Such content may be viewed by not only the owner of the mobile phone terminal but also third parties such as family members and friends.

  Similarly, content stored on a server on the Internet, for example, can be browsed freely by various unspecified users as well as specific users who can log in using specific IDs and passwords. Sometimes you can.

  However, the content of the image file may include personal information of a specific person, and the content of the e-mail often includes personal information of the specific person. Therefore, it is desirable to treat content that is not viewed only by a specific user as confidential content (confidential content information) and conceal it from browsing by a third party. Further, if the content is simply concealed, a third party will recognize that there is confidential content. Therefore, the information processing apparatus 100 in FIG. 1 has a function for concealing from a third party including the fact that the secret content exists.

  As illustrated in FIG. 1, the information processing apparatus 100 includes a mode setting unit 10, a storage unit 20, a secret control unit 30, and a file browsing processing unit 40. The storage unit 20 includes a content data storage area 21, a pseudo file display buffer 22, a secret management information storage area 23, and a temporary file storage temporary buffer 24. Further, the secret control unit 30 includes a secret target file extraction unit 31, a pseudo file generation unit 32, a pseudo file display unit 33, a pseudo file control unit 34, a pseudo file storage unit 35, and a pseudo file management unit 36. Each of these elements is a function realized by the computer executing a predetermined program.

  The mode setting unit 10 turns on / off a secret mode (also referred to as a secret mode) related to the operation of the information processing apparatus 100 when browsing content according to a switch operation or a command input of a user who has special authority such as the owner of the information processing apparatus 100. Switch. That is, the secret mode and the non-confidential mode (normal mode) are switched.

  The content data storage area 21 included in the storage unit 20 stores various information contents, that is, files holding image files, e-mail files, and various history information (incoming call history, etc.). This information content may include confidential content. In FIG. 1, the storage unit 20 is illustrated as storage in the terminal, but is not limited thereto. For example, it is conceivable to use a storage on a server connectable via a predetermined network or an external storage device such as a memory card.

  The file browsing processing unit 40 reads the content stored in the content data storage area 21 in accordance with an input operation of a specific user or an unspecified user, and displays the content specified by the user so that it can be viewed. I do.

  The secret control unit 30 performs processing for concealing a specific confidential content from an unspecified user among the contents displayed by the file browsing processing unit 40 when the confidential mode is designated by the mode setting unit 10. Do.

  The secret target file extraction unit 31 extracts a file that needs to be concealed, that is, a secret target file, from among a large number of content file groups stored in the content data storage area 21. Examples of the secret target file include a file designated in advance by a specific user (such as an owner) and a file automatically determined according to specific conditions. In addition, as a specific content data storage area 21, an area in a specific folder to which a secret attribute is assigned in the storage unit 20 is assumed. The storage unit 20 may be an external storage device such as a memory card.

  The pseudo file generation unit 32 is an example of an alternative content information generation unit, and uses alternative content (substitute content information) to be substituted for secret content (secret target file) stored in the content data storage area 21 as a predetermined conversion rule. Generate based on.

  Note that the alternative content generated by the pseudo file generation unit 32 is referred to as a pseudo file here. This pseudo file is held in a pseudo file display buffer 22 or the like which is an area different from the content data storage area 21. A specific example of the pseudo file will be described later.

  The pseudo file display unit 33 displays the pseudo file generated by the pseudo file generation unit 32 as the content browsed by the user.

  The pseudo file control unit 34 performs control when an input operation such as deletion, movement, editing, or the like is performed on the pseudo file displayed as the browsing target via an operation unit (not shown).

  The pseudo file storage unit 35 controls the pseudo file displayed as the browsing target when the storage operation is performed via an operation unit (not shown).

  The pseudo file management unit 36 manages various information related to the pseudo file generated by the pseudo file generation unit 32.

  Next, a specific example relating to each storage area and information configuration used by the information processing apparatus 100 of FIG. 1 is shown in FIG. In the present embodiment, as shown in FIG. 2, the information processing apparatus 100 has a secret management information storage area 23 and a pseudo file storage temporary buffer 24 in addition to the content data storage area 21 and the pseudo file display buffer 22 described above. Is used.

  In the example illustrated in FIG. 2, “aaaaaa.jpg”, “bbbbbb.jpg”, “ccccc.jpg”, “dddddd.jpg”, “ffffff.jpg”, and “gggggg.jpg” are stored in the content data storage area 21. ”,“ Hhhh.gif ”,“ iiiiii.gif ”,“ jjjjj.gif ”,... Are stored. In other words, in this example, there are image files in the “jpg” format or the “gif” format as the content to be browsed by the user. Of course, not only images but also e-mail content and history information may be used as browsing target content. As described above, the content data storage area 21 functions as a first content area for sequentially storing a plurality of pieces of content information.

  When the user wants to browse the content, the content list 51 or 52 of FIG. 2 corresponding to the content of the content data storage area 21 is displayed. An example of the display contents in the normal display state, that is, when the concealment mode is off is a content list (index) 51. An example of display contents when the confidential mode is on is a content list (index) 52.

  In the situation of FIG. 2, it is assumed that the contents of No. 3, No. 6, No. 9 on the content data storage area 21 are designated as secret contents. When the secret mode is off, as shown in the content list 51 in FIG. 2, the third content “ccccc.jpg”, the sixth content “gggggg.jpg”, and the ninth content “jjjjj.gif” The file name of each file (with an asterisk added) is displayed as it is. The “*” mark indicates that the corresponding file is a secret content.

  On the other hand, when the concealment mode is on, contents different from the content list 51 are displayed as in the content list 52 in FIG. That is, in the content list 52 in FIG. 2, the file names of “ccccc.jpg” of No. 3, “gggggg.jpg” of No. 6, “jjjjj.gif” of No. 9, which are secret contents such as secret images, etc. “BBBBB”, “FFFFF”, and “IIIII” are displayed. Here, the pseudo files such as the pseudo images indicated by “BBBBB”, “FFFFF”, and “IIIII” are “bbbbb.jpg” and “fffff.jpg”, which are non-confidential content (content that is not confidential), respectively. , “Iii.gif.” Is generated based on the file “iii.gif”. The pseudo file is preferably generated from a file near the secret target file (date and time, permutation, etc.).

  Accordingly, regarding the content list 52 that can be referred to by an unspecified user in the state where the confidential mode is on, the number of displayed contents is the same as the content list 51, but the confidential content “ccccc” and “gggggg” , “Jjjjj” are concealed.

  Further, in the content list 52 shown in FIG. 2, the file name “bbbbbb.jpg” of the adjacent second content is used in order to conceal the name of the third “ccccc.jpg”. Similarly, in order to conceal the 6th “gggggg.jpg”, the adjacent 5th file name “fffff.jpg” is used, and in order to conceal the 9th “jjjjj.gif”, the adjacent 8 No. file name “iii.gif” is used.

  Further, when the pseudo file is edited by the pseudo file control unit 34 and the pseudo file is saved by the pseudo file saving unit 35 when the secret mode is on, the pseudo file is usually stored in the content data saving area 21. The However, if there is no free space in the content data storage area 21, it is stored in the temporary buffer 24 for pseudo file storage.

  The secret management information storage area 23 shown in FIG. 2 stores management information for managing each secret content present in a large number of contents stored in the content data storage area 21. In the example shown in FIG. 2, each file of the third content “ccccc.jpg”, the sixth content “gggggg.jpg”, and the ninth content “jjjjj.gif” is a secret content. Exists in the secret management information storage area 23. That is, “3.ccccc.txt”, “6.ggggg.txt”, and “9.jjjjj.txt” manage the confidential contents of “ccccc.jpg”, “gggggg.jpg”, and “jjjjj.gif”, respectively. These text files are stored in the secret management information storage area 23.

In each of these text files, the following information can be included in addition to the information specifying the corresponding confidential content file, for example.
a. Pseudo file information to be output as an alternative to confidential content b. Information of non-confidential content used when generating the pseudo file c. History information indicating editing operations on pseudo files

  The secret management information storage area 23 may store file management information held in the content data storage area 21 that is the basis of a pseudo file such as a pseudo image.

  The pseudo file generated by the pseudo file generation unit 32 shown in FIG. 1 is held on the pseudo file display buffer 22 shown in FIG. In the example shown in FIG. 2, since the third, sixth, and ninth contents on the content data storage area 21 are secret contents, pseudo files corresponding to these are generated and held on the pseudo file display buffer 22. That is, “3.BBBBBB.xxx”, “6.FFFFF.xxx”, and “9.IIIII.xxx” on the pseudo file display buffer 22 shown in FIG. 2 represent the retained pseudo files.

  The pseudo file display buffer 22 is merely a temporary storage buffer. The pseudo file on the pseudo file display buffer 22 is not counted as the number of stored contents such as images.

  The temporary buffer 24 for saving pseudo files shown in FIG. 2 is a buffer that is temporarily used for storing pseudo files in special cases. For example, an unspecified user can delete a pseudo file displayed in place of secret content when the secret mode is on, delete it as unnecessary, move it to the trash, etc., and save it after editing ( May be overwritten). However, if there is no empty area on the content data storage area 21, the corresponding pseudo file cannot be stored in the content data storage area 21 unless the confidential content is overwritten. On the other hand, since it seems that there is no problem in overwriting and saving this file for a third party who is viewing the pseudo file, a sense of incongruity occurs when the saving operation cannot be performed. Therefore, when there is no free space in the content data storage area 21 when the pseudo file is stored, a new storage destination area is secured using the pseudo file storage temporary buffer 24 instead. .

  If the content data storage area 21 has no free space when the confidential mode is canceled, the pseudo file management unit 36 notifies that the content data storage area 21 has no free space. As a result, a deletion instruction can be issued to delete at least part of the data stored in the content data storage area 21. Then, the pseudo file storage unit 35 moves the pseudo file temporarily stored in the temporary file storage temporary buffer 24 to the content data storage area 21. The pseudo file management unit 36 may delete the pseudo file from the pseudo file saving temporary buffer 24 instead of moving the pseudo file.

  A specific example of the state transition of each display screen output by the information processing apparatus 100 of FIG. 1 is shown in FIG. That is, a specific user such as the owner views the display such as the display screens 61, 62, 67, and 68 shown in FIG. 3 in the state where the secret mode is off (that is, the normal mode). Further, the unspecified user views the display such as the display screens 63, 64, 65, and 66 shown in FIG. 3 in the state where the secret mode is on.

  In the display screen 61 of FIG. 3, a list 61a of contents, an image 61b that is the content of the selected contents, and information 61c of the number of stored cases / number of shootable pictures are displayed. The content list 61a represents file names of a large number of contents existing in a specific folder (corresponding to the content data storage area 21) selected in advance by the user. The image 61b is the content of the second content “2.bbbb” selected by the user operation in the content list 61a. In the information 61c, “Number of saved items / number of shootable images”, “Number of saved items” indicates the number of images currently stored in the content data storage area 21 (left side of the slashed line), and “ This indicates whether the image can be captured and stored in the content data storage area 21, that is, the remaining capacity of the content data storage area 21 (right side of the hatched line).

  In the state of the display screen 61, when the user moves the cursor for selecting the content in the content list 61a and selects the third content “3.cccccc”, the display content is switched as in the display screen 62. . That is, on the display screen 62, the content of the third content “3.ccccc” is displayed as the image 62b.

  On the other hand, contents such as the display screen 63 are displayed when the secret mode is on. That is, “3.ccccc” in the third content list 61 a on the content data storage area 21 is a secret content and is not displayed on the display screen 63. Instead, “BBBBBB” is displayed as the file name at the third content location in the content list 63 a in the display screen 63. This file name “BBBBB” is automatically determined as a name similar to the file name “bbbbb” of the second content. On the display screen 63, an image 63b is displayed as the content of the third content.

  The image 63b is the content of the pseudo file generated by the pseudo file generation unit 32. In the example of FIG. 3, based on the previous position adjacent to the third content selected in the content list 63a, that is, the file “2.bbbb” that is the second content, It is generated as a similar image. As described above, in the content data storage area 21, a pseudo file is generated by the pseudo file generation unit 32 based on the non-confidential content existing within a predetermined range from the area where the selected secret content is stored. Thereby, the pseudo file which should be displayed so that a third party may not feel uncomfortable can be generated.

  In addition, an image 63b having a content similar to an image obtained when, for example, shooting fails due to camera shake is displayed. Therefore, the image 63b is similar to the image 61b in the display screen 61, but is recognized by an unspecified user as a failed image that is not worthy of attention. Therefore, the file name and image of the secret content do not appear on the display screen 63 and are surely hidden from the browsing user. Further, the display screen 63 does not include information indicating the possibility that secret content exists.

  With the display screen 63 displayed, an unspecified user may perform various operations such as editing on the displayed content (pseudo file). The display screen 64 shows the result of performing some editing and saving operation on the displayed content. The display screen 65 shows the result of moving the content displayed on the display screen 63 from “Folder 1” to “Folder 2”. The display screen 66 shows the result of deleting the displayed content.

  From the viewpoint of the operating user, saving the edited file means overwriting the pre-edited image that has been on the content data storage area 21 so far. There should be no change in the number of content files. Further, the pseudo file image displayed instead of the secret content in the state where the secret mode is on exists on the pseudo file display buffer 22 which is an area different from the content data storage area 21 (FIG. 2). (Refer to this page) Therefore, when the user operates to save the pseudo file, there is a possibility that the number of saved images may be inconsistent. In the present embodiment, the processing described later (FIG. 6) is performed so that the information 64c of the number of stored / capable of photographing on the display screen 64 after execution of storage does not change (looks like overwriting) from the content of the information 63c before storage. Step S48, step S59 in FIG. 7).

  Also, history information related to operations such as editing and saving performed by the user on the pseudo file is saved in the secret management information saving area 23. Further, when the user performs a move operation so that the save destination folder is changed with respect to the pseudo file as in the display screen 65, the folder move information is saved in the secret management information save area 23.

  On the display screen 66 after the user deletes the pseudo file “3.BBBBBB”, display processing is executed by the pseudo file display unit 33 so that the user can see the content of the corresponding pseudo file as deleted. Is done. In other words, the display of the pseudo file name “3.BBBBBB” is deleted from the list 66a, and the number of saved / photographable number information 66c displays the number of images that has changed due to the effect of deletion.

  When each display screen 66, 64 and 65 is displayed when the secret mode is on, when the secret mode is turned off by the mode setting unit 10 and switched to the normal mode, the display screen 62, Transition to a state in which 67 and 68 are displayed.

  If the pseudo file is deleted while the secret mode is on, the pseudo file that is not saved is deleted, but the secret target file that is replaced with the pseudo file is not deleted. Accordingly, when the display screen 66 with the secret mode turned on is switched to the display screen 62 in the normal mode, the original number “100/400” that is not affected by the deletion is stored in the information 62c of the number of stored / capable of photographing. Is displayed correctly.

  On the other hand, the pseudo file that has been stored in the state of the display screen 64 is overwritten when viewed from the user side, so there is no change in the information 64c, but there is a pseudo file that has not been actually stored. Will be saved. Accordingly, when the display mode 64 is displayed and the secret mode is turned off and the display mode 67 is switched to the normal mode display screen 67, the information 67c of the number of stored images / capable of shooting becomes “101/399”, and the stored pseudo file The effect of this appears as a change in the number of sheets.

  Further, when the pseudo file is moved so that the storage folder of the pseudo file is changed as in the display screen 65, the actual number of saved items does not change. Therefore, even if the secret mode is turned off from the display screen 65 and the display screen 68 is switched to the display screen 68 in the normal mode, the information 68c of the number of stored cases / capable of photographing does not change to “100/400”.

  FIG. 11 shows a list of specific examples relating to the information of “number of stored items / number of shootable images” being displayed on the display screens 61 to 68 shown in FIG. As shown in FIG. 11, in any situation, when the concealment mode is ON, the number of stored items and the number of images to be captured are displayed so that an unspecified user does not realize that the pseudo file is an alternative to the actual concealment content. The possible number is automatically adjusted. Further, in the normal mode when the concealment mode is off, the actual number of saved items and the number of shootable items are displayed.

Next, a detailed operation of the information processing apparatus 100 illustrated in FIG. 1 will be described.
First, the file display control process when the information processing apparatus 100 is set to the confidential mode will be described.

  The contents of the file display control process executed by the information processing apparatus 100 are shown in FIG. Details of step S15 in FIG. 4 are shown in FIG.

  In step S <b> 11 of FIG. 4, the secret control unit 30 identifies the current operation mode specified by the mode setting unit 10. If the confidential mode (secret mode) is on in the current operation mode, the process proceeds from the next step S12 to S14, and if it is the normal mode, the process proceeds to step S13.

  In step S13, under the control of the file browsing processing unit 40, various content files are displayed in a list as shown in, for example, the display screens 61 to 68 shown in FIG. (Image etc.) is displayed.

  In step S <b> 14, the pseudo file management unit 36 acquires information necessary for managing the secret content and the generated pseudo file from the pseudo file display buffer 22 and the secret management information storage area 23.

  In step S <b> 15, the secret target file extraction unit 31 extracts a secret target file from a large number of contents stored in the content data storage area 21. That is, the process shown in FIG. 5 is performed.

  Here, the secret target file extraction process executed by the information processing apparatus 100 will be described.

  In step S31 of FIG. 5, the secret target file extraction unit 31 checks extraction conditions determined in advance. In the present embodiment, a first extraction condition that permits extraction of specific content that needs to be concealed from a large number of contents, and specific content that is selected in advance by the user and specified as a concealment target are extracted. And a second extraction condition permitting that.

  In step S32, the secret target file extraction unit 31 determines whether or not the first extraction condition is permitted. For example, if the first extraction condition is face detection and this is permitted, it is considered that detection of a human face is necessary, and the process proceeds to step S33. If the first extraction condition is not permitted, the process proceeds to S34.

  In step S <b> 33, the secret target file extraction unit 31 extracts only the content of an image including a person's face as a secret target file from a large number of contents stored in the content data storage area 21. Note that face detection is an example, and the secret target file may be extracted by human detection or other methods. In this way, the secret target file extraction unit 31 has a function as a secret content information determination unit that extracts features of content such as a person's face and determines secret content based on the extracted features. Thereby, the secret content can be automatically determined according to the feature of the content, and privacy protection or the like can be achieved.

  For example, in the image group of the content list 53 shown in FIG. 8, there are images 53a, 53b, 53c, 53d, 53e, and 53f including human faces. Images including these faces can be concealed when the concealment mode is on and replaced with a display such as the content list 54. Regarding the detection of a person's face, the presence or absence of the face can be identified by performing image processing using a known technique to recognize the characteristics of the person's face.

  In step S34, the secret target file extraction unit 31 determines whether or not the second extraction condition is permitted. If the second extraction condition is permitted, the process proceeds from step S34 to S35 in FIG.

  In step S <b> 35, the secret target file extraction unit 31 extracts only specific content selected in advance by the user and designated as a secret target from among a large number of contents stored in the content data storage area 21. Information indicating whether or not each content has been designated as a confidential target by the user may be included as attribute information in the content file, or may be included in the information stored in the secret management information storage area 23. good.

  According to such secret target file extraction processing, the content intended by the user can be designated as the confidential content, or the confidential content can be automatically designated regardless of the user operation.

  Returning to FIG. 4, in step S <b> 16, the pseudo file management unit 36 identifies the type of content to be processed. Specifically, it is identified whether each content on the content data storage area 21 that the user intends to browse is an image file or a mail file. If it is an image, the process proceeds to step S17, and if it is an e-mail, the process proceeds to step S19.

  In step S <b> 17, the pseudo file generation unit 32 selects the original content from which the pseudo file is based according to the content of the conversion rule determined in advance. For example, another content that is adjacent to the hidden content to be concealed in the order in which the files are arranged is selected as the original content. If other content in the adjacent position is also a secret content, the content in the adjacent position is searched until a non-secret content is found. In this case, it is preferable to select an appropriate original content at a position as close as possible to the secret content. Thereby, the unnaturalness due to the display of the pseudo file is further reduced.

  For example, in the example of the content list 52 shown in FIG. 2, in order to conceal the file name “3.ccccc” of the third content that is the secret content, the file name “2.bbbbb” of the second content is originally used. Selected as content. The same applies to the display screen 63 shown in FIG.

  The conversion rule for generating the pseudo file may be stored in advance as fixed data in the storage unit 20 of the information processing apparatus 100, or downloaded from an appropriate server connected to a network such as the Internet. You may get it. Thereby, even in a terminal that does not hold conversion rule information in advance, appropriate conversion rule information can be acquired, and the conversion rule can be determined flexibly.

  In step S18, the pseudo file generation unit 32 generates a pseudo file according to the content of the conversion rule based on the original content selected in step S17.

  For example, in the example of the display screen 63 illustrated in FIG. 3, the image 63 b representing the content of the pseudo file “3.BBBBBB” that is an alternative to the third secret content is the second content “ 2. bbbbb ”is the original content, and the original content image is generated as a result of falsification into an image that appears to be affected by camera shake. In other words, when viewed from an unspecified user who browses, the content of the pseudo file displayed on the screen looks like a failed image that is not worth browsing.

Note that generating a failed image in which the influence of camera shake appears due to falsification of the original content is a typical example of a process for generating a pseudo file. For example, a pseudo file is generated by another method as described below. You may do it.
1. A blur image with a defocused image is generated.
2. A part of the image is extracted on the basis of the position shifted from the center of the image of the original content, and an image that makes it difficult to see the main subject is generated.
3. A low-resolution image having a smaller number of pixels than that of a standard image or an image having a small size is generated.
4). By changing the color and brightness of the image of the original content, an image with poor color and light / dark is generated.

  As described above, the pseudo file generation unit 32 may process the non-confidential content and generate the alternative content. By processing like a failed image, it is possible to conceal confidential content without drawing the attention of a third party.

  Further, the pseudo file generation unit 32 may search for an appropriate image that does not correspond to secrecy, such as a landscape, and may use this as it is as a pseudo file. In the example shown in FIG. 8, since a person is shown in each of the images 53 a to 53 f in the content list 53, these are replaced in the content list 54 with images 54 a to 54 f showing a landscape.

  Further, the pseudo file generation unit 32 may be performed in order for each piece of secret content, or may be performed for each of a plurality of pieces of secret content.

  Further, the pseudo file generation unit 32 generates a pseudo file based on a predetermined original content before, and if the editing (saving) history of the pseudo file exists in the secret management information saving area 23, Do not generate a new pseudo file based on the original content. That is, a new pseudo file is not generated based on the original content of the pseudo file having a control history such as a deletion history, an editing history, a movement history, etc. in the secret management information storage area 23. Thereby, when a substitute content displayed by a third party is regarded as unnecessary and deleted, it is possible to prevent the content that should have been deleted from being restored and displayed at the next browsing.

  On the other hand, when a pseudo file is generated for the mail content, the pseudo file generation unit 32 determines a method for the simulation in step S19. Here, the pseudo file generation unit 32 acquires information representing a conversion rule for the confidential content from a storage unit inside the information processing apparatus 100 or from a server connected via a predetermined network. In addition, unnecessary mail deleted in the past is acquired from the deletion folder or the like as the original content from which the pseudo file is based.

  In step S20, the pseudo file generation unit 32 generates a mail pseudo file according to the content of the acquired conversion rule. Specifically, for the acquired original content mail, the items such as sender, title, mail text, and pictograph are corrected according to the conversion rule, and the result is set as a pseudo file.

  When the pseudo file is generated in step S20, for example, a character string conversion table 73 as shown in FIG. 10 can be used. In the character string conversion table 73 of FIG. 10, the character string before conversion (first character string) and the character after conversion for each item of “text”, “person name”, “time”, and “pictogram”. Information indicating a correspondence relationship with the column (second character string) is held.

  By using the character string conversion table 73, for example, contents such as the mail display screen 72 can be generated from the contents of the mail display screen 71 shown in FIG. That is, by replacing the first character string of each item of the character string conversion table 73 with the second character string corresponding to the item in the information on the mail display screen 71, the mail pseudo like the mail display screen 72 is displayed. A file can be generated.

  As described above, the storage unit 20 includes the character string conversion table 73 that stores the first character string and the second character string in association with each other, and the pseudo file generation unit 32 is based on the character string conversion table 73. Then, the alternative content including the second character string is generated from the secret content including the first character string. As a result, it is possible to easily conceal the presence of the content information of the confidential mail.

  Returning to FIG. 4, in step S21, the pseudo file management unit 36 generates attribute (property) information of the pseudo file generated in step S18 or S20. In other words, it is not possible to maintain consistency in time and place simply by taking over the attributes of the original content as they are, and it may cause distrust to unspecified users. Appropriate modifications are made to.

  For example, in the content list 52 shown in FIG. 2, the third content “3.BBBBBB”, the sixth content “6.FFFFF”, and the ninth content “9.IIIII” are pseudo files. The pseudo file “3.BBBBBB” is generated with the second content “2.bbbbbb” as the original content. In this case, as the attribute of the pseudo file “3.BBBBBB”, the place in the arrangement order is between the second content and the fourth content, and the shooting date and time is after the second content and the fourth content. Must be before content. Therefore, as the attribute of the pseudo file “3.BBBBBB”, similar attribute information that can maintain consistency by slightly shifting the attribute of “2.bbbbbb” that is the original content is generated.

  As described above, the pseudo file management unit 36 uses the information on the time at which the pseudo file is generated based on the information on the time at which the original content, which is the generation source of the pseudo file, is generated (for example, taken). You may correct | amend so that it may continue from the time when this was produced | generated. Thereby, it is possible to prevent inconsistency between the arrangement order of the contents that can be browsed by the third party and the order of the recording times of the contents. In other words, the third party can accept the pseudo file without further discomfort.

  In step S22, the pseudo file storage unit 35 temporarily stores the generated pseudo file on the pseudo file display buffer 22 including the attribute information.

  In step S <b> 23, the pseudo file management unit 36 allocates the pseudo file stored on the pseudo file display buffer 22 as a substitute file for the corresponding secret content. Further, the pseudo file storage unit 35 stores this management information in the secret management information storage area 23.

  Therefore, in step S13, when the file browsing processing unit 40 displays a list of contents, it is identified based on the management information stored in the secret management information storage area 23 whether each content should be kept secret. The pseudo file generated corresponding to the content to be concealed can be acquired. That is, the file browsing processing unit 40 can display various content files as a list and display the contents (images and the like) of the selected content, as in the display screens 61 to 68 shown in FIG. it can. At this time, when the secret mode is on, the secret target file can be replaced with a pseudo file and displayed.

  According to such a file display control process in the concealment mode, it is possible to easily conceal the presence of content information to be concealed. In addition, a third party who does not have the right to browse the confidential content information does not notice the fact that the confidential content information exists. In addition, there is no need for server cooperation in order to perform such concealment.

  Next, pseudo file control processing such as editing, deleting, and moving of a pseudo file executed by the information processing apparatus 100 will be described.

  When an unspecified user performs an operation such as editing on a pseudo file displayed with the confidential mode on, the pseudo file control unit 34 executes a pseudo file control process shown in FIG.

  In step S41 in FIG. 6, a list of contents is displayed under the control of the pseudo file display unit 33, such as the contents list 52 shown in FIG. 2 and the display screen 63 shown in FIG.

  In step S42, the pseudo file control unit 34 determines whether or not there is a pseudo file control request. Specifically, the pseudo file control unit 34 determines whether or not an operation such as editing is performed on the pseudo file via an operation unit (not shown) from the displayed content list. When a pseudo file control request is generated, the process proceeds from step S42 to step S43.

  In step S43, the pseudo file control unit 34 executes processes such as deletion, movement, and editing in accordance with a user input operation via an operation unit (not shown).

  In step S44, it is identified whether or not a pseudo file saving operation has been performed. If there is a saving operation, the process proceeds to step S45, and if there is no saving operation, the process proceeds to step S49.

  In step S <b> 45, the pseudo file storage unit 35 identifies whether there is a free area on the content data storage area 21. Here, since the area on the content data storage area 21 is managed by the number of contents stored, the maximum number of storages determined in advance (“500” in the example of FIG. 11) and the actual content data storage area 21 are stored. Compare with the number of saved items above to identify the availability. If the maximum number of saved items is stored and there is no space, the process proceeds to step S47, and if there is a space, the process proceeds to step S46.

  In step S <b> 46, the pseudo file storage unit 35 extracts the pseudo file that has been stored from the pseudo file display buffer 22 and stores it in the content data storage area 21.

  In step S 47, the pseudo file storage unit 35 extracts the pseudo file that has been stored from the pseudo file display buffer 22 and stores it in the temporary file storage temporary buffer 24. In this way, when the pseudo file storage unit 35 tries to store a file (an edited file, a moved file, etc.) based on the pseudo file, the remaining capacity of the content data storage area 21 is set when the secret mode is set. If it is less than the predetermined capacity, the file is stored in the temporary buffer 24 for storing pseudo files as the second content storage area. As a result, it is possible to avoid a situation in which a pseudo file that should have been saved when viewed from the user side cannot be saved.

  In step S48, the pseudo file management unit 36 displays the number of stored items (the number of stored items / the number of shootable images / the number of receivable items) so that the number of contents visible to the user is not inconsistent as a result of the storage process in step S46 or step S47. Update the contents of.

  For example, when a content is already stored in the content data storage area 21 up to the maximum value “500”, and the pseudo file is edited and stored, the content is simply overwritten when viewed from the user side. However, it actually becomes a new storage of the pseudo file. Here, if there is free space, it is stored in the content data storage area 21, and if there is no free space, it is stored in a temporary buffer for storing pseudo files. Also, as shown in the number display D11 shown in FIG. 11, the processing result (here “500/0”) so that (the number of stored images / the number of images that can be captured) does not change before and after storage is displayed in step S48. Reflected.

  As described above, when the pseudo file is stored in the content data storage area 21 by the pseudo file storage unit 35 when the secret mode is set, the pseudo file management unit 36 has the number of storage items for display in the content data storage area 21. Manage so that it does not change. As a result, it is possible to prevent inconsistencies in the number of stored contents that can be recognized by a third party, and it seems that the pseudo file originally existed.

  If there is an empty space in the content data storage area 21, the pseudo file is stored in the content data storage area 21 in step S46. Even in this case, the pseudo data is overwritten when viewed from the user side. 11 is processed so that the number display D12 shown in FIG. That is, the processing result (here, “100/400”) so that (number of saved / number of shootable images) does not change before and after saving is reflected in the display content in step S48.

  On the other hand, when the pseudo file is deleted, the pseudo file management unit 36 decreases the number of stored images and increases the number of images that can be captured because the file actually stored is deleted.

  In step S <b> 49, the pseudo file management unit 36 registers control history information about the pseudo file that has been edited or the like in the secret management information storage area 23. For example, when a pseudo file (“3.BBBBBB” in the content list 52) corresponding to the third secret content “3.ccccc” included in the content list 51 shown in FIG. 2 is edited. The history information is registered in the secret management information storage area 23 as history information of “3.ccccc.txt” corresponding to the secret content “3.ccccc”.

  According to such a pseudo file control process, a pseudo file can be edited, deleted, moved, etc. without giving a sense of incongruity to a third party, and the pseudo file can be stored.

  Next, display control processing executed by the information processing apparatus 100 when the secret mode is canceled will be described.

  When the secret mode is switched from on to off by the mode setting unit 10, the secret control unit 30 executes a process as shown in FIG.

  In step S51 in FIG. 7, the display mode is switched from the secret mode to the normal mode under the control of the secret control unit 30. For example, the display is switched from the state where the content list 52 shown in FIG. 2 is displayed to the display of the content list 51. Alternatively, the display screens 63 to 66 shown in FIG. 3 are switched to the display screens 61, 62, 67 and 68.

  In step S52, the pseudo file display unit 33 displays a secret content file that is not displayed when the secret mode is on (for example, “3.ccccc *” in the content list 51 of FIG. 2) in the list, and displays the pseudo file. (For example, “3.BBBBBB” in the content list 52 of FIG. 2) is switched to non-display.

  In step S53, the pseudo file storage unit 35 refers to the state of the temporary buffer 24 for storing pseudo files. In step S54, the pseudo file storage unit 35 identifies whether or not the pseudo file is stored in the temporary buffer 24 for storing pseudo files. If a pseudo file is stored in the temporary file saving temporary buffer 24, the process proceeds from step S54 to step S55, and if not stored, the process proceeds to step S59.

  In step S55, the pseudo file storage unit 35 refers to the state of the content data storage area 21. In step S56, the pseudo file storage unit 35 identifies whether there is no empty area on the content data storage area 21 and new content cannot be stored. If new content cannot be stored, the process proceeds from step S56 to S57, and if there is a free area and can be stored, the process proceeds to step S58.

  In step S57, since there is no space in the storage destination area, the pseudo file management unit 36 displays a message for instructing deletion of any stored content on the display screen or the like, and notifies the user. Then, after any content is deleted from the content data storage area 21 in accordance with the user's deletion instruction, the process proceeds to step S58.

  As described above, when the pseudo file management unit 36 switches from the secret mode to the non-secret mode, and the remaining capacity of the content data storage area 21 is less than the predetermined capacity, at least the pseudo file management unit 36 is stored in the content data storage area 21. It has a function as a deletion instruction presentation unit that presents an instruction for deleting one content. Accordingly, the generated pseudo file or the like can be continuously stored by the user organizing the currently stored content.

  If the pseudo file stored in the pseudo file storage temporary buffer 24 is not necessary, the pseudo file management unit 36 deletes the pseudo file from the pseudo file storage temporary buffer 24 and stores the content data storage area 21. Saving to may be omitted.

  In step S58, the pseudo file storage unit 35 moves the pseudo file after editing and the like stored in the temporary file storage temporary buffer 24 to the content data storage area 21 and stores the pseudo file.

  As described above, when the remaining capacity of the content data storage area 21 is greater than or equal to a predetermined value when the pseudo file storage unit 35 is switched from the secret mode to the non-secret mode, the pseudo file storage unit 35 stores the pseudo file storage unit 35 in the temporary file storage temporary buffer 24. The pseudo file is moved to the content data storage area 21 and stored. Thereby, the use of the temporary buffer 24 for temporarily storing pseudo files for temporary storage can be minimized and an efficient storage operation can be performed.

  In step S59, the pseudo file management unit 36 updates the display contents regarding the number of stored items / the number of shootable images / the number of receivable images. That is, if an unspecified user performs a save operation when the secret mode is on, a difference occurs between the number of cases displayed in the state and the actual number. Accordingly, when the secret mode is turned off and the normal mode is set, the display content is updated to display the actual number of cases.

  For example, when the secret number mode is switched to the normal mode while the number display D11 “500 cases / 0 cases” shown in FIG. 11 is displayed, the number display D13 is changed to “501 cases / 0 cases”. In this case, since only 500 items can be stored in the content data storage area 21, in order to store the pseudo file on the temporary file storage temporary buffer 24 in the content data storage area 21, 500 items already stored are stored. It is necessary to secure an area by deleting one or more of.

  Further, when “100/400” in the number display D12 shown in FIG. 11 is displayed, switching from the secret mode to the normal mode switches to “101/399” in the number display D14. That is, the edited pseudo file saved by another user is also saved in the content data saving area 21, and the number is reflected in the saved number.

  In this manner, the pseudo file management unit 36 updates the number of stored items for display to the number of stored items stored in the content data storage area 21 when switching from the secret mode to the non-secret mode. Thereby, in the non-secret mode which does not consider the malicious browsing of a third party, the actual number of saved items can be displayed.

  On the other hand, even if the pseudo file is deleted in the secret mode, the pseudo file management unit 36 updates the number of items actually stored in the content data storage area 21 when switching from the secret mode to the non-secret mode. . Therefore, in the case of deletion, only the file that was not actually saved is deleted, so the number of saved items and the number of shootable images are returned to the state before the pseudo file was deleted.

  According to the information processing apparatus 100 of this embodiment, when the confidential mode is on, the confidential content (images, e-mail content, history information, etc.) including personal information is concealed from the viewer. A pseudo file that replaces the content is displayed instead. Therefore, a desired file can be displayed without the reader being aware of the fact that secret content exists from the display content. In this way, it is possible to prevent a third party from noticing that specific content is concealed, which is useful for preventing unauthorized access and preventing privacy infringement.

  The present invention is useful for an information processing apparatus, an information processing program, and the like that can easily conceal the presence of content information to be concealed.

DESCRIPTION OF SYMBOLS 10 Mode setting part 20 Storage part 21 Content data storage area 22 Pseudo file display buffer 23 Secret management information storage area 24 Pseudo file storage temporary buffer 30 Secret control part 31 Secret target file extraction part 32 Pseudo file generation part 33 Pseudo file display Unit 34 Pseudo file control unit 35 Pseudo file storage unit 36 Pseudo file management unit 40 File browsing processing unit 51-54 List of contents output for display 61-68 Display screen 71, 72 Mail display screen 73 Character string conversion table 100 Information Processing equipment

Claims (15)

A mode setting unit for setting the operation mode to a secret mode or a non-secret mode;
A storage unit that stores content information including confidential content information that is confidential content information;
Based on a predetermined conversion rule, an alternative content information generation unit that generates alternative content information that replaces the confidential content information stored in the storage unit;
A display unit for displaying the alternative content information generated by the alternative content information generation unit;
An information processing apparatus comprising: The information processing apparatus according to claim 1,
The storage unit includes a first content storage area that sequentially stores a plurality of pieces of content information,
The information processing apparatus that generates the alternative content information based on non-confidential content information existing in a predetermined range from an area where the confidential content information is stored in the first content storage area. An information processing apparatus according to claim 2,
The alternative content information generation unit is an information processing apparatus that processes the non-confidential content information and generates the alternative content information. The information processing apparatus according to claim 1, further comprising:
An information processing apparatus comprising: a secret content information determination unit that extracts features of content information and determines the secret content information based on the extracted features. The information processing apparatus according to claim 1, further comprising:
Provided with an alternative content information management unit for managing alternative content information,
The alternative content information management unit uses the generation time information when the alternative content information is generated based on the generation time information when the original content information that is the generation source of the alternative content information is generated, as the generation time of the original content information. An information processing device that corrects to be continuous. The information processing apparatus according to claim 1, further comprising:
An alternative content information management unit for managing the alternative content information;
The storage unit has a content management area for storing alternative content management information including original content information that is a generation source of the alternative content information, and information of a control history of the alternative content information,
The alternative content information management unit generates new alternative content information by the alternative content generation unit based on original content information that is a generation source of alternative content information having a control history stored in the content management area. An information processing device that prohibits this. The information processing apparatus according to any one of claims 1 to 6, further comprising:
An alternative content information management unit for managing the alternative content information;
When the alternative content information management unit stores the alternative content in the first content storage area when the secret setting mode is set by the mode setting unit, the number of stored items for display in the first content storage area Is an information processing device that controls to keep the value unchanged. The information processing apparatus according to claim 7,
The alternative content information management unit stores the number of storage items for display stored in the first content storage region when the mode setting unit switches from the secret mode to the non-secret mode. An information processing device that updates the number of cases. The information processing apparatus according to any one of claims 2 to 8, further comprising:
A content storage control unit that controls storage of content information based on the alternative content;
The storage unit has a second content storage area different from the first content storage area,
If the remaining capacity of the first content storage area is less than a predetermined capacity when the secret mode is set by the mode setting unit, the content storage control unit sends content information based on the alternative content information to the second content information. Information processing apparatus to be stored in the content storage area. The information processing apparatus according to claim 9, further comprising:
At the time of switching from the secret mode to the non-secret mode by the mode setting unit, if the remaining capacity of the first content storage area is less than a predetermined capacity, at least one stored in the first content storage area An information processing apparatus comprising a deletion instruction presenting unit for presenting an instruction to delete content information of a part. The information processing apparatus according to claim 9 or 10,
The content storage control unit is configured to store the second content storage when the remaining capacity of the first content storage area is greater than or equal to a predetermined capacity when the mode setting unit switches from the secret mode to the non-confidential mode. An information processing apparatus for storing alternative content information stored in an area in the first content storage area. The information processing apparatus according to claim 1,
The storage unit includes a character string conversion table that stores a first character string and a second character string in association with each other,
The information processing device that generates the alternative content information including the second character string from the secret content information including the first character string, based on the character string conversion table. The information processing apparatus according to claim 1, further comprising:
An information processing apparatus comprising a receiving unit that receives the conversion rule from an external server. Setting the operation mode to a hidden mode or a non-hidden mode;
Storing content information including confidential content information that is confidential content information in a storage unit;
Based on a predetermined conversion rule, generating alternative content information that replaces the confidential content information stored in the storage unit;
Displaying the generated alternative content information on a display unit;
An information processing method comprising:   An information processing program for causing a computer to execute each step of the information processing method according to claim 14.

Images